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Top Stories 

• Toyota Motor Corp. announced several recalls covering 6.39 million vehicles globally, 
including 2.34 million in the U.S., from model years 2004 to 2013 due to five different 
defects. - USA Today (See item 1) 

• Highway 290 eastbound in Houston was shut down April 8 for about 17 hours while crews 
cleaned up over 250 gallons of spilled diesel fuel caused by a semi-truck crashing into a 
concrete wall, killing the driver. - KTRK 13 Houston (See item 12 ) 

• Ottawa County Department of Public Health officials confirmed April 8 that the norovirus 
pathogen was the cause of an outbreak that affected more than 300 people who ate at Wild 
Chef Japanese Steakhouse Grill and Bar in Michigan in March. - Grand Haven Tribune 
(See item 15 ) 

• Police took a male student into custody after he allegedly went on a stabbing spree April 9 
at Franklin Regional Senior High School in Murrysville, Pennsylvania, leaving at least 20 
people injured. - CNN (See item 20 ) 
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Energy Sector 



Nothing to report 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

1. April 9, USA Today - (International) 5 defects lead Toyota to recall 6.4M vehicles. 
Toyota Motor Corp. announced several recalls covering 6.39 million vehicles globally, 
including 2.34 million in the U.S., from model years 2004 to 2013 due to five different 
defects. 

Source: http://www.usatodav.com/storv/monev/cars/2014/04/09/tovota- 
recalls/7497031/ 

2. April 8, Reuters - (National) U.S. fines GM for not answering recall questions. The 
U.S. National Highway Traffic Safety Administration announced April 8 that General 
Motors is being fined $7,000 per day for missing an April 3 deadline to provide 
information relating to a recall of 2.6 million vehicles over a defective ignition 
component linked to at least 13 deaths. 

Source: http://money.msn.com/business- 
news/article.aspx?feed=QBR&date=20 1 40408&id= 1 7508245 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

3. April 9, South Florida Business Journal - (Florida) Two arrested in $70M investment 
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scheme for virtual concierge machines. Two men associated with a virtual concierge 
service based in Jupiter, Florida, were arrested and charged with allegedly running a 
$70 million Ponzi scheme. The U.S. Securities and Exchange Commission also froze 
the assets and accounts of the two men in a civil action. 

Source: http://www.biziournals.com/southflorida/news/2014/04/08/two-arrested-in- 
70m-investment-scheme-for-virtual.html 



4. April 8, U.S. Securities and Exchange Commission - (National) SEC charges CVS 
with misleading investors and committing accounting violations. CVS Caremark 
Corp. agreed to pay $20 million in a settlement with the U.S. Securities and Exchange 
Commission to resolve charges that the company misled investors and used improper 
accounting that artificially inflated its financial performance. 

Source: http://www.sec.gov/News/PressRelease/Detail/PressRelease/1370541437806 

5. April 8, Bloomberg News - (International) U.S. seeks to seize $12 million in Swiss- 
linked tax case. U.S. federal prosecutors filed a forfeiture action April 8 against an 
unidentified individual and the individual’s father, seeking to seize $12.2 million held 
in two unidentified Swiss banks due to an alleged mail and wire fraud scheme that 
sought to defraud the Internal Revenue Service of due taxes. The accounts were 
allegedly set up by a Swiss attorney who previously pleaded guilty to committing tax 
fraud for more than a decade. 

Source: http://www.bloomberg.com/news/2014-04-Q8/u-s-seeks-to-seize-12-million-in- 
swiss-linked-tax-case.html 



6. April 8, Chicago Sun-Times - (Illinois) “Benchwarmer Bandit” holds up Loop bank. 
A suspect known as the “Benchwarmer Bandit” robbed a Citi Bank branch in the Loop 
area of Chicago April 8, the fifth robbery linked to the suspect. 

Source: http://chicago.cbslocal.com/2014/04/08/benchwarmer-bandit-holds-up-loop- 
bank/ 



7. April 8, Philadelphia Business Journal - (Pennsylvania) General contractor pleads 
guilty in $20M mortgage loan scheme. A general contractor pleaded guilty April 8 to 
working with co-conspirators to defraud banks and the Federal Housing Administration 
by inflating purchase prices on mortgage documents for over 100 Philadelphia 
properties between 2004 and 2009, resulting in over $20 million in fraudulent proceeds. 
The case also involves other defendants associated with the KREW Settlement Services 
company that allegedly ran the scheme. 

Source: http://www.biziournals.com/philadelphia/news/2014/04/08/general-contractor- 
pleads-guilty-in-20m-mortgage.html?page=all 

8. April 8, Chicago Sun-Times - (Illinois) ‘Hooded Bandit’ strikes sixth NW suburban 
bank. A suspect known as the “Hooded Bandit” robbed a Chase Bank branch in 
Bensenville April 7, the sixth robbery linked to the suspect in the greater Chicago area 
since February 2013. 

Source: http://voices.suntimes.com/news/breaking-news/hooded-bandit-strikes-sixth- 
nw-suburban-bank/ 
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9. April 7, Nashville Tennessean - (Tennessee) Nashville man pleads guilty to bank 
fraud. A Nashville man pleaded guilty April 7 to writing $1.2 million in checks from 
the account of his employer Revolution Pictures Inc., depositing them into accounts 
under his control, and filing false income tax returns that failed to report over $816,000 
in taxable income. 

Source: http://www.tennessean.com/story/news/crime/2014/04/07/nashville-man- 
pleads- guilty-bank- fraud/7 44024 1 / 
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Transportation Systems Sector 

10. April 8, Bakersfield Californian - (California) Two killed in Tuesday crash that 
closed Hwy 178. Two people were killed after their vehicles struck in a head-on 
collision shutting down Highway 178 near Paradise Cove for more than 2 hours April 
8 . 

Source: http://www.bakersfieldcalifomian.com/local/breaking- 

news/x!042359 169/Hi ghway- 178-closed-between- Yankee-Canyon-Drive-and-Mobile- 

Drive 

11. April 8, Pittsburgh Post-Gazette - (Pennsylvania) Mount Washington landslide halts 
trains, Duquesne Incline; restaurant closed as precaution. The Duquesne Incline, 
freight traffic along the Norfolk Southern Railway line, and LeMont restaurant 
temporarily closed after a landslide fell from Mount Washington in Pittsburgh April 8, 
due to the failure of weak clay stone after recent rainfall. 

Source: http://www.post-gazette.com/local/city/2014/04/08/Landslide-blocks-railroad- 
tracks-closes-Duquesne-Incline/stories/201404080148 

12. April 8, KTRK 13 Houston - (Texas) Highway 290 reopens hours after fiery crash 
near Barker Cypress exit. Highway 290 eastbound at Barker Cypress in Houston was 
shut down April 8 for about 17 hours while crews cleaned up over 250 gallons of 
spilled diesel fuel caused by a semi-truck crashing into a concrete wall and bursting 
into flames, killing the driver. 

Source: http://abclocal.go.com/ktrk/storv?section=resources/traffic&id=9495737 

13. April 8, WJLA 7 Washington, D.C. - (Virginia) Gust of wind caused plane to crash- 
land off runway in Leesburg, Va. A small single-engine airplane making a landing at 
Leesburg Executive Airport in Loudoun County, Virginia, veered off the runway and 
flipped over due to a strong gust of wind April 8. 

Source: http://www.wila.com/articles/2014/04/plane-flips-over-on-runwav-in-leesburg- 
va-101954.html 

14. April 8, Forth-Worth Star Telegram - (Texas) Arson fire disrupts service at 
Arlington Heights post office. Police are investigating an alleged act of vandalism 
April 8 after a fire was set in the lobby of the Arlington Heights Post Office in Fort 
Worth, which caused a disruption of the retail and postal service. A mobile retail unit 
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was expected at the site to accommodate customers April 9. 

Source: http://www.star-telegram.com/2014/04/Q8/5722394/arson-fire-disrupts-service- 
at.html 



For another story, see item 38 
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Food and Agriculture Sector 

15. April 8, Grand Haven Tribune - (Michigan) 300 sickened by noro virus at Wild Chef. 
Ottawa County Department of Public Health officials confirmed April 8 that the 
norovirus pathogen was the cause of an outbreak that affected more than 300 people 
who ate at Wild Chef Japanese Steakhouse Grill and Bar in Holland Township, 
Michigan, in March. The restaurant was professionally sanitized and met requirements 
set forth by the department before it reopened April 7, following a voluntary closure 
April 1. 

Source: http://www.grandhaventribune.com/article/928216 

16. April 8, U.S. Food and Drug Administration - (National) Buffalo Sav Inc. issues 
allergy alert on undeclared soy in “Grandma's Perogies Potato & Bacon 
Perogies.” The U.S. Food and Drug Administration announced April 8 that Buffalo 
SAV Inc., recalled 2 pound packages of its Grandma’s brand Potato and Bacon 
perogies products due to undeclared soy protein. 

Source: http://www.fda.gov/Safety/Recalls/ucm392417.htm 

17. April 7, Milwaukee Journal Sentinel - (National) Illness linked to Crave Brothers 
soft cheese caused by unsanitary conditions, CDC reports. A report from the U.S. 
Centers for Disease Control and Prevention stated that a 2013 Listeria outbreak 
connected to cheeses from Wisconsin-based Crave Brothers Farmstead Cheese Co., 
which caused one death and several illnesses, was likely caused by substantial 
sanitation deficiencies during the cheese-making process. Three of the company’s 
cheese products were recalled as a result of the outbreak. 

Source: http://www.isonline.com/business/illness-linked-to-soft-cheese-caused-by- 
unsanitary-conditions-cdc-reports-b99242383zl-254224441.html 
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Water and Wastewater Systems Sector 

18. April 8, Charlotte Observer - (North Carolina) Water-boil advisory lifted for three 
Lake Norman communities. An April 6 break-in and theft of computer control 
equipment from The Point subdivision in Iredell County caused 1,314 customers in 3 
Lake Norman subdivisions to have their water service disrupted due to an automatic 
control system problem, prompting a boil water advisory that ended April 8. 

Source: http://www.charlotteobserver.com/2014/04/08/4826708/water-boil-advisorv- 
lifted-for.html 
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Healthcare and Public Health Sector 

19. April 5, Chicago Tribune - (Illinois) Chicago-area doctors’ group announces data 
breach. Midwest Orthopaedics located in Rush University Medical Center in Chicago 
announced April 4 that surgical information for 1,256 patients may have been 
compromised in February when an individual accessed a doctor’s Gmail account. All 
affected patients were notified and the doctor’s group has since eliminated use of 
outside physician email accounts in their domain. 

Source: http://articles.chicagotribune.com/2014-04-05/news/chi-chicagoarea-doctors- 
group-announces-data-breach-20 140404 1 midwest-orthopaedics-advocate-medical- 
group-data-breach 
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Government Facilities Sector 

20. April 9, CNN - (Pennsylvania) ‘There’s a kid with a knife,’ teen says of 
Pennsylvania school stabbings. Police took a male student into custody after he 
allegedly went on a stabbing spree April 9 at Fran kl in Regional Senior High School in 
Murrysville, leaving at least 20 people injured. Officials announced that all elementary 
schools in the district were closed. 

Source: http://www.cnn.com/2014/04/09/iustice/pennsvlvania-school- 
stabbing/index.html 

21. April 9, CNN - (Colorado) Habanero peppers cause school evacuation. Investigators 
found six habanero chili peppers scattered among wood chips near the playground at 
Jefferson County Open School in Colorado, and determined them to be the cause of a 
hazmat situation that prompted 30 students and a teacher’s aide to undergo 
decontamination and treatment April 7. The school is removing the wood chips and 
washing down surfaces that may have been exposed while they continue to investigate 
where the peppers originated from. 

Source: http://www.cnn.com/2014/04/08/health/colorado-school-peppers/ 

22. April 8, WCTI 12 New Bern - (North Carolina) Sheriff: Teen made 20 bomb threats 
to Onslow County schools, businesses. The Onslow County Sheriff’s Office 
announced April 8 that a former Southwest High School student was arrested in 
connection with calling in 20 hoax bomb threats to schools and businesses in the 
county since February. 

Source: http://www.wctil2.com/news/teen-arrested-for-making-bomb- 
threats/25370684 

23. April 8, WLTX 19 Columbia - (South Carolina) All clear given at courthouse after 
threat. The Municipal Courthouse in Columbia, South Carolina, was evacuated for 
more than 2 hours April 8 after an individual called 9-1-1 and issued a threat to the 
building. Police cleared the scene after nothing suspicious was found. 
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Source: http://www.wltx.com/storv/news/local/2014/04/08/columbia-city-courthouse- 
evacuated/7460069/ 



24. April 8, WBAL 11 Baltimore - (Maryland) Tractor-trailer rear-ends school bus, 4 
injured. Four students were injured April 8 when a semi-truck crashed into a school 
bus in Caroline County, Maryland. 

Source: http://www.wbaltv.com/news/tractortrailer-rearends-school-bus-4- 
iniured/25384842 

25. April 8, WTVD 11 Durham - (North Carolina) Six injured in Raleigh school bus 
accident. Five students and the bus driver of a Wake County school bus were injured 
and transported to area hospitals April 8 when a truck rear-ended the bus in Raleigh. 
Three additional students received medical attention at the scene. 

Source: http://abclocal.go.com/wtvd/storv?section=news/local&id=9496344 

T Return to top i 

Emergency Services Sector 

26. April 9, WTHR 13 Indianapolis - (Indiana) 911 service disrupted for some Indiana 
counties. Emergency 9-1-1 phone lines in several Indiana counties were disrupted 
April 9, in what Madison County officials called a regional issue with AT&T service. 
Calls for affected counties were routed to other 9-1-1 Dispatch Centers. 

Source: http://www.wthr.com/story/25202981/2014/04/09/91 1-service-disrupted-for- 
some-indiana-counties 
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Information Technology Sector 

27. April 9, Softpedia - (International) Companies advise users to change passwords 
due to possible Heartbleed attacks. Several private companies and government 
organizations advised users to change their passwords in the wake of the Heartbleed 
vulnerability in OpenSSL that could expose usernames, passwords, and other secure 
communications. Security researchers also began posting analyses of the 
vulnerability as organizations worked to close the vulnerability on their systems. 
Source: http://news.softpedia.com/news/Companies-Advise-Users-to-Change- 
Passwords-Due-to-Possible-Heartbleed-Attacks-436704.shtml 

28. April 9, Softpedia - (International) Four vulnerabilities fixed with the release of 
Adobe Flash Player 13.0.0.182. Adobe issued an update for its Flash Player, closing 
four security issues. 

Source: http://news.softpedia.com/news/Four-Vulnerabilities-Fixed-With-the-Release- 
of- Adobe-Flash-Player- 1 3-0-0- 1 82-436600.shtml 

29. April 9, Softpedia - (International) WordPress 3.8.2 addresses 2 vulnerabilities, 
includes 3 security hardening changes. A new version of WordPress was released for 
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download containing fixes for two security vulnerabilities and three changes that 
enhance security. 

Source: http://news.softpedia.com/news/WordPress-3-8-2-Addresses-2-Vulnerabilities- 
Includes-3-Security-Hardening-Changes-436613.shtml 

30. April 8, Threatpost- (International) Last call for XP, Office 2003 updates: April 
Patch Tuesday fixes 11 vulnerabilities. Microsoft released its monthly Patch Tuesday 
round of updates April 8, including the final updates for Windows XP and Office 2003, 
with 4 bulletins closing 11 vulnerabilities. 

Source: http://threatpost.com/last-call-for-xp-office-2003-updates-april-patch-tuesdav- 
fixes-ll-vulnerabilities/105329 

31. April 8, IDG News Service - (International) Cybercriminals use sophisticated 
PowerShell-based malware. Researchers at Symantec identified a new malicious 
PowerShell script that contains several ways to hide itself and can inject malicious code 
into rundll32.exe. The finding follows the discovery of another malicious PowerShell 
script by Trend Micro researchers known as CRIGENT or Power Worm during March. 
Source: http://www.networkworid.com/news/2014/040814-cybercriminals-use- 
sophisticated-powershell-based-280521.html 

32. April 8, Threatpost - (International) Google patches 31 flaws in Chrome. Google 
released a new version of its Chrome browser, closing 31 vulnerabilities, 19 of which 
were rated as high priority. 

Source: http://threatpost.com/google-patches-31-flaws-in-chrome/105326 

33. April 8, Softpedia - (International) 2013 threat report: 8 mega data breaches, 552 
million identities exposed. Symantec published its Internet Security Threat Report for 
2013, showing a 62 percent increase in data breaches from organizations during the 
year, with 552 million identities exposed, among other findings. 

Source: http://news.softpedia.com/news/2013-Threat-Report-8-Mega-Data-Breaches- 
552-Million-Identities-Exposed-436508.shtml 

34. April 8, IDG News Service - (International) Yahoo email anti-spoofing policy breaks 
mailing lists. Security researchers reported encountering an issue with mailing lists 
after Yahoo introduced a new Domain-based Message Authentication, Reporting, and 
Conformance (DMARC) policy to prevent email spoofing. 

Source: http://www.networkworld.com/news/2014/040914-yahoo-email-anti-spoofing- 
policy-breaks-280500.html 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

35. April 9, WTVJ 6 Miami - (Florida) 2 rescued, 100 evacuated from high-rise fire in 
Fort Lauderdale. Authorities are investigating the cause of an April 8 fire that broke 
out at the Coral Ridge Towers apartment building in Fort Lauderdale and prompted the 
evacuation of more than 100 residents. Two individuals were transported to an area 
hospital for treatment. 

Source: http://www.nbcmiami.com/news/local/2-Rescued-100-Evacuated-From-FIigh- 
Rise-Fire-in-Fort-Lauderdale-25450598 1 .html 



36. April 9, Orange County Register - (California) Fire causes $2 million in damage to 
Anaheim apartment site. An apartment building under construction at the Monaco 
Apartments complex in Anaheim caught fire, severely damaging the building and 
several structures on the site April 8, suffering an estimated $2 million in damage. 
Authorities are searching for the cause of the fire and are investigating if construction 
activity may have sparked the blaze. 

Source: http://www.ocregister.com/articles/north-608806-fire-smoke.html 

37. April 9, Cincinnati Enquirer - (Kentucky) Arson arrest after apartment fire. A 
suspect was arrested and charged with arson in connection to an April 8 fire at a Taylor 
Mill apartment building in Kentucky that forced dozens of residents to evacuate and 
sent one police officer to an area hospital for treatment due to minor smoke inhalation. 
Source: http://www.cincinnati.com/story/news/crime/2014/04/09/arson-arrest-after- 
apartment-fire/7497 19 1/ 

38. April 8, Chicago Tribune - (National) Hairspray shipment leads to $77,000 
proposed FAA fine. The Federal Aviation Administration is proposed a $77,000 fine 
April 8 against Unilever Bestfoods Inc., for attempting to ship a pump bottle of 
hairstyling spray and three aerosol cans of hairspray via FedEx to the corporate 
headquarters of Ulta Salon, Cosmetics ,& Fragrance Inc., that was not properly classed, 
described, packaged, marked, or in the proper shipment condition based on hazardous 
materials regulations. 

Source: http://www.chicagotribune.com/business/breaking/chi-hairspray-shipment-faa- 
fine-20140408,0,830131 .story 

39. April 8, Palm Springs Desert Sun - (California) Coachella daycare evacuated due to 
gas leak. A construction worker inadvertently struck a gas line and caused a leak April 
8, prompting the evacuation of 23 children and 1 1 adults from a daycare center, as well 
as 2 nearby businesses in Coachella. Gas service was cut off to at least 3 apartment 
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complexes and several homes while crews worked to contain the leak. 

Source: http://www.desertsun.com/storv/news/local/coachella/2014/04/08/coachella- 
gas-leak-daycare/7467089/ 

40. April 8, WJLA 7 Washington, D.C. - (Maryland) Hazmat teams evacuate Bethesda 
office building due to freon leak. Hundreds of employees and visitors were evacuated 
from the Two Democracy Center office building in Bethesda April 8 due to a reported 
freon leak. Officials investigated the cause of the incident while crews worked to 
control the leak and ventilate the building. 

Source: http://www.wila.com/articles/2014/04/hazmat-teams-evacuate-bethesda-office- 
building-due-to-freon-leak- 101 956 .html 

41. April 8, Glendale News-Press - (California) 'White haze' at Glendale grocery store 
leads to evacuation. A Ralphs grocery store in Glendale was evacuated and closed 
April 8 after the release of a refrigerant material produced a white haze that spread 
throughout the store, causing an estimated $50,000 in damage and sending one 
individual to an area hospital. Crews cleared the scene after about 5 hours and the store 
was scheduled to reopen April 9. 

Source: http://articles.glendalenewspress.com/2014-04-08/news/tn-gnp-white-haze-at- 
glendale-grocerv-store-leads-to-evacuation-20140408 1 grocery-store-store-manager- 
haze 



For additional stories, see items 11 and 22 
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Dams Sector 



Nothing to report 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 
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